Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File:                     6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          ncWmPesYGpPJogWkuFv/DK1hL+ud1swZfRktXgcskDg=
Subject key identifier:   18:93:E9:C5:0A:67:BE:A1:13:30:F7:06:37:48:00:BB:9A:2B:C8:64
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       04E1
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Sat 21 Oct 2023 00:12:40 +0000
ROA not before:           Sat 21 Oct 2023 00:12:40 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     135386
IP address blocks:        103.155.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct 21 00:12:40 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65331777-6342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:3f:f4:e2:c3:05:8d:da:7e:c9:f5:c8:6d:
                    2e:81:bf:1d:77:24:79:78:c6:d3:2b:24:7e:95:d0:
                    e1:c1:83:7c:e2:a2:63:14:be:ff:b6:e1:c2:7d:26:
                    36:2d:f8:67:d0:51:d5:7a:13:0d:40:39:61:51:2d:
                    3f:0a:50:32:c1:6a:d0:8e:5e:5f:e7:58:c7:12:f9:
                    d8:f1:74:3d:35:ca:f0:ff:12:88:fa:ee:c3:de:9a:
                    8a:9c:12:6b:e0:f4:12:a7:41:61:18:90:21:45:d4:
                    72:e9:0d:67:5c:3a:b3:60:3c:10:0d:72:9f:ca:66:
                    27:4a:89:f8:be:53:9f:74:b2:e4:9a:5c:1e:33:bf:
                    7e:a2:0c:15:a8:db:d9:4a:47:52:70:a4:bf:1a:58:
                    e9:d4:c9:9a:e8:20:68:1e:9a:dd:af:b4:83:8f:54:
                    b2:74:31:7d:97:a5:14:98:0d:0d:9e:a0:53:1f:f1:
                    ff:b3:5d:d2:0d:02:2c:3a:7a:93:27:c2:45:d5:19:
                    5f:e2:1e:65:e3:55:46:ed:b0:dc:b7:7d:c8:40:a5:
                    0e:e7:80:03:56:dd:f5:ad:0d:f4:95:91:79:fb:21:
                    5f:ab:7e:b8:f9:0c:df:98:4b:9f:e6:3d:3b:95:f2:
                    44:9d:9b:c2:83:d4:5b:f5:f3:f9:5c:f6:50:91:22:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:E9:C5:0A:67:BE:A1:13:30:F7:06:37:48:00:BB:9A:2B:C8:64
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:43:bb:eb:42:ea:2f:4f:bb:cb:2a:85:b5:96:a4:2e:3e:
         5f:f9:38:59:4b:6b:e2:77:eb:28:fd:a1:7e:b6:11:2b:38:0b:
         6f:40:0b:df:38:73:08:a7:b0:80:e2:dc:1b:a9:9a:c6:5b:45:
         08:37:02:0b:40:d0:49:59:de:c0:4a:73:12:4b:d6:0f:5c:44:
         c1:81:64:51:6b:87:67:ca:27:49:e0:29:58:e3:a4:b3:f2:39:
         ab:f5:64:73:56:5c:37:13:46:3f:56:ab:3f:13:72:b0:00:40:
         84:c7:ba:eb:e9:52:c2:6a:48:86:44:96:ea:92:0f:36:9e:a7:
         2a:62:fb:46:59:80:0d:79:1b:90:64:a4:6d:d1:6d:3f:ba:b8:
         3f:d9:b2:1d:06:cd:48:0d:9f:a6:47:c4:0f:88:6c:c1:ce:0a:
         55:b1:fd:31:66:51:f1:d3:d4:9c:04:da:62:47:ed:f8:13:d0:
         7a:7a:25:50:b9:fb:4a:80:04:43:bf:03:7b:86:2c:1f:e6:1d:
         4d:03:0d:c2:39:82:13:4b:72:ef:32:c6:85:b7:57:33:b6:2e:
         f2:74:e7:4a:e4:f3:88:31:32:44:15:d4:d7:34:df:0c:f7:13:
         50:50:cb:7a:d2:c8:37:6c:90:3d:92:38:7a:c2:a2:0d:90:eb:
         18:ff:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:07 2024 by rpki-client on console-ams.rpki-client.org